What is Cyber-Security?
Cyber-security is the collection of methods, technologies and processes that protect computer systems and networks against cyber attacks. It includes activities like monitoring and assessing security risks, responding to cyber threats, and improving the overall security posture of an organization.
In today’s world, it seems like everything is dependent on computers and the internet: communication (email, social media), entertainment (interactive video games, apps), transportation (cars, boats, planes) and even health care (monitoring devices, online access to medical records). As more and more information is stored in digital formats, it becomes increasingly vulnerable to attack.
Attackers may seek financial gain, revenge or even corporate espionage in attacking organizations and individuals. Examples include ransomware, where malicious software (malware) infects a system and encrypts files before demanding a fee (usually in the form of Bitcoin) to decrypt them; or phishing attacks, which target users with emails containing links that download malware or lead to fraudulent websites. Hackers can also eavesdrop on data transmissions by monitoring electromagnetic emissions generated by equipment or use techniques like pinging to probe ports and services on exposed machines.
To reduce the risk of these attacks, security tools are used, such as antivirus and antimalware programs. Regular software updates and patches are key to reducing security vulnerabilities. More advanced systems use microkernel design and asymmetric encryption to protect data and run components like device drivers, protocol stacks and file systems in the less privileged user space. Some systems also use formal verification (like the theorem proving software seL4 or SYSGO’s PikeOS) to enable critical algorithms and code to be mathematically proven to be secure by design.